Privacy & Data Policy

1. Introduction

Club 500, full name Club 500 by JMB operated by JMB Management LTD ("we", "us" or "our"), respects your privacy. This Policy explains how we handle personal data relating to applicants, current and former Members, guests, website and platform users, and others interacting with the Club. Personal data means information that identifies or could identify you. We act as controller where we determine how and why it is processed.

2. Information We Collect

Depending on your interaction with us, we may collect identity, contact and professional details; application responses, referrals, verification information and interview notes; interests, preferences and goals; Dillon communications and connection history; bookings, Club 500 Passport activity and feedback; and billing and transaction records. Driving experiences may require licence, identification, insurance, safety and incident information. Payment card details may be processed directly by authorized payment providers.

Information may come from you, your Club activity, authorized referrals and Partners, or public professional sources and registries. We limit collection to relevant information. Please keep your details accurate, avoid unnecessary sensitive information and only provide another person's details with appropriate authority. Additional safeguards or consent requirements may apply to sensitive data.

3. How We Use Your Information

We use personal data to assess and administer membership; verify applications; provide bookings, events, driving experiences and benefits; personalize recommendations and introductions; process payments; communicate with you; improve Club services; protect Members and guests; prevent fraud; manage incidents and disputes; and meet legal, accounting, insurance and regulatory obligations.

4. Our Basis for Processing

We process personal data with your consent or on another basis permitted by applicable law, including where necessary to provide requested services, administer membership agreements, meet legal obligations or establish or defend legal rights. You may withdraw consent without affecting earlier lawful processing. Services may be limited where necessary information can no longer be processed.

5. Dillon & Member Connections

Dillon may use automated processing or profiling of your interests, preferences, goals, activity and feedback to personalize recommendations. Significant membership decisions involve meaningful human review unless we expressly inform you otherwise and applicable law permits.

We limit information shared with other Members to what is appropriate for an introduction or Club activity. Where our connection process requires mutual acceptance, identities or contact details are shared after both Members accept. Members must not misuse others' personal data. Further details appear in the Club 500 Dillon & Member Connection Policy.

6. Sharing Your Information

We may share necessary information with automotive, hospitality and event Partners; technology, communications, payment and verification providers; professional advisers and insurers; authorities where legally required; and a purchaser, successor or affiliated entity in a legitimate business restructuring or transfer.

Club 500 and The Rufescent may exchange relevant member information across all membership levels of both clubs to coordinate membership benefits, events and services, subject to applicable law and any required consent.

We seek appropriate contractual and security arrangements with providers processing data on our behalf, limiting their use to agreed purposes. Partners and third-party platforms may process data under their own privacy policies. Group messaging services may make profile or contact details visible to other participants. We do not sell Member personal data as a standalone commercial product.

7. Security & International Transfers

We use reasonable technical and organizational measures to protect personal data and limit staff and contractor access to what their roles require. Complete security cannot be guaranteed. We respond to data breaches and notify authorities and affected individuals where legally required.

Data may be transferred to or accessed from outside the UAE. Where required, we use lawful transfer mechanisms, such as adequate protection, contractual safeguards or explicit consent where legally permitted.

8. Data Retention

We retain personal data only as long as reasonably necessary for its purposes or required by law, considering membership administration, accounting, insurance, safety and legal claims. This also applies to former Members and unsuccessful applicants. When no longer needed, data is securely deleted, anonymized or otherwise appropriately disposed of.

9. Marketing & Cookies

We obtain marketing consent where required. You may unsubscribe from optional marketing while continuing to receive essential membership, booking, payment and safety communications.

Our digital services may use cookies and similar technologies for functionality, security, preferences, analytics and performance. We provide notices and choices where required by applicable law.

Today that includes Microsoft Clarity (to understand how people use the site) and the Meta Pixel (to measure advertising and conversion events such as invitation requests and applications). Where the law requires it, we will ask for your consent before using advertising cookies.

10. Children's Privacy

Club 500 membership is intended for adults. We do not knowingly collect personal data relating to children. If we become aware that such data has been collected, we will take steps to delete it promptly, unless retention is required by law.

11. Your Rights

Subject to applicable law and exceptions, you may request information about processing; access, correction, erasure or transfer of your data; restriction or cessation of processing; withdrawal of consent; and information or review concerning automated processing or profiling.

Contact us below to exercise your rights or raise a concern. We may verify your identity and will respond within legally required periods. You may also complain to the competent data protection authority.

12. Policy Updates & Contact

We may update this Policy and will make the current version available through Club 500. We provide appropriate notice of material changes and obtain consent where required. Read this Policy alongside our Membership Terms & Club Rules, Driving Experience Terms & Safety Requirements, and Dillon & Member Connection Policy.

support@c500.ai

Club 500 by JMB

DIFC, Dubai UAE